Question library
Questions from real interviews. Drill any of them by voice in a couple of minutes, with an interviewer, a score and feedback.
What is SQL injection, and how do you protect against it?JuniorYou have an endpoint, GET /orders/{id}, that requires authorization and returns an order. A security review said there's a hole in it. What's the most likely problem, and how do you close it?Mid-levelYou're choosing between server-side sessions and JWTs for authentication in a web application. How will you choose, and what problems will you run into with each approach?Mid-levelYou're choosing between stateless JWTs and server-side sessions for a web application and a mobile client. How would you make the decision?Senior